"DNSSEC improves the situation" is (a) false and (b) a concession to the narrative that DNSSEC is worth doing.
Someone actively engaged in trying to prevent centralization of Internet trust, and decoupling it from the Five Eyes governments --- a worthy goal, I think --- should be adamantly against DNSSEC. But here's Snowden doing the opposite.
It's not because Snowden is disingenuous. I think he's a true-believer. It's because he doesn't understand DNSSEC.
Someone actively engaged in trying to prevent centralization of Internet trust, and decoupling it from the Five Eyes governments --- a worthy goal, I think --- should be adamantly against DNSSEC. But here's Snowden doing the opposite.
It's not because Snowden is disingenuous. I think he's a true-believer. It's because he doesn't understand DNSSEC.